Vulnerabilities in Unknown

5,582 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-92430MEDIUMRede Itaú for WooCommerce < 5.4.7 - Unauthenticated Order Status Manipulation via PIX WebhookEPSS 0.3%CVE-2026-5335MEDIUMMagic Export & Import < 1.2.0 - Unauthenticated PII DisclosureEPSS 0.3%CVE-2024-4959MEDIUMFrontend Checklist <= 2.3.2 - Admin+ Stored XSS via ItemsEPSS 0.3%CVE-2026-78152MEDIUMSureRank 1.6.2 - 1.10.0 - Unauthenticated Author Email Disclosure via Person SchemaEPSS 0.3%CVE-2026-84146MEDIUMXpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick ViewEPSS 0.3%CVE-2026-16738MEDIUMConekta Payment Gateway < 6.2.2 - Unauthenticated Order Payment Completion via Webhook ForgeryEPSS 0.3%CVE-2024-6390MEDIUMQuiz and Survey Master (QSM) < 9.1.0 - Contributor+ Stored XSSEPSS 0.3%CVE-2024-2375MEDIUMWPQA < 6.1.1 - Contributor+ Stored XSSEPSS 0.3%CVE-2023-7074HIGHWP Social Bookmark Menu <= 1.2 - Settings Update via CSRFEPSS 0.3%CVE-2024-12275MEDIUMCanvasFlow <= 1.5.5 - Reflected XSSEPSS 0.3%CVE-2024-3113MEDIUMFormFlow < 2.12.2 - Admin+ Stored XSSEPSS 0.3%CVE-2024-5075MEDIUMWP eMember < 10.6.6 - Reflected XSSEPSS 0.3%CVE-2022-3926MEDIUMWP OAuth Server < 3.4.2 - Client Secret Regeneration via CSRFEPSS 0.3%CVE-2026-16042MEDIUMLWS Optimize < 3.4 - Subscriber+ Cache DeletionEPSS 0.3%CVE-2026-16035MEDIUMminiOrange 2FA < 6.2.7 - Subscriber+ Arbitrary-Recipient OTP SendEPSS 0.3%CVE-2024-3632MEDIUMSmart Image Gallery < 1.0.19 - Update/Delete Google API Key via CSRFEPSS 0.3%CVE-2024-4900MEDIUMSEOPress < 7.8 - Contributor+ Open RedirectEPSS 0.3%CVE-2024-5573MEDIUMEasy Table of Contents < 2.0.66 - Admin+ Stored XSSEPSS 0.3%CVE-2024-12767LOWBuddyBoss platform < 2.7.60 - Private Comment Exposure via IDOREPSS 0.3%CVE-2025-11127CRITICALMstoreapp Mobile (App <= 2.08, Multivendor <= 9.0.1) - Unauthenticated Privilege EscalationEPSS 0.3%